$ rpki-client -vvf repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft File: 3BA10823C279932D7573B930625CD2884433C744.mft (raw, json) Hash identifier: DurqU2huSRXK1s/ZV+dkhBgG+rQUnaorpLbSxQo7pf4= Subject key identifier: CF:A6:5D:21:F6:3E:F1:E5:BD:5D:E9:BC:19:E3:EF:07:D1:38:55:08 Authority key identifier: 3B:A1:08:23:C2:79:93:2D:75:73:B9:30:62:5C:D2:88:44:33:C7:44 Certificate issuer: /CN=3BA10823C279932D7573B930625CD2884433C744 Certificate serial: 471010CB00BC3AACA227DD77EF8E820E63E4F512 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft Manifest number: 0170 Signing time: Sun 20 Jul 2025 03:31:43 +0000 Manifest this update: Sun 20 Jul 2025 03:26:43 +0000 Manifest next update: Wed 23 Jul 2025 12:56:43 +0000 Files and hashes: 1: 3130332e3137302e39372e302f32342d3234203d3e20313432333638.roa (hash: KTRb8AUpIFgW2BgKsFuDBBnaCuIi/vxH3uLO0lAD6oo=) 2: 323030313a6466323a353463303a3a2f34382d3438203d3e20313432333638.roa (hash: ixLzAKntJwguG57KCkj7JdgNgdRNlMJvWELZH5FNYlE=) 3: 3130332e3137302e39362e302f32332d3233203d3e20313432333638.roa (hash: vxYEkSC9Nhj9Qwmzlp+zXc3eS9PpNRTtM0I668VgpCo=) 4: 3BA10823C279932D7573B930625CD2884433C744.crl (hash: IeDXrVcv4LWY5Zoi9XFKaBVnpHkhtrk8cRLoO3gaQDk=) 5: 3130332e3137302e39362e302f32342d3234203d3e20313432333638.roa (hash: w4V1rEatEsKd8iCkT+5VUEi6gaUfZgI24xqxd5TI3Io=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.crl rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 12:56:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:10:10:cb:00:bc:3a:ac:a2:27:dd:77:ef:8e:82:0e:63:e4:f5:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BA10823C279932D7573B930625CD2884433C744 Validity Not Before: Jul 20 03:26:43 2025 GMT Not After : Jul 23 12:56:43 2025 GMT Subject: CN=CFA65D21F63EF1E5BD5DE9BC19E3EF07D1385508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e9:ac:73:b8:b4:e8:a8:7f:94:45:01:74:56: 5a:ed:d1:9d:92:5c:46:98:aa:ed:ae:5e:1f:d0:dc: 83:ef:e8:32:11:71:06:f6:2b:f5:8d:96:13:aa:c9: d3:d4:bc:0e:42:83:75:91:a0:0c:55:f6:26:f6:4b: d1:97:f4:fd:0d:b6:24:cc:55:85:d8:c4:e9:93:85: 3d:73:a4:a4:6d:80:30:59:7a:b0:7d:ce:18:34:ec: 5e:1f:df:b5:5f:2a:b0:6b:32:4b:af:d1:45:53:64: f6:a5:0e:6d:b2:e2:0b:ae:8b:73:51:d4:13:ef:5f: 31:7c:da:14:3c:79:ef:92:75:b3:78:11:60:e9:11: 25:1d:91:2d:6c:1b:b8:ec:63:07:73:d0:2b:5f:7b: 46:0b:13:a1:33:87:47:f1:c1:f8:e9:9c:8a:81:da: 1e:27:ba:55:8d:d6:2b:be:e6:ef:0a:26:42:ac:b5: 24:81:2e:14:a6:79:57:d1:14:c1:8f:d4:de:c6:2f: b3:30:39:ef:05:52:76:95:01:df:d2:e6:ac:e2:a0: 5b:0b:db:47:a0:b7:c2:48:b0:02:ed:1a:0b:fc:ef: 5e:23:47:ce:35:e8:5e:f5:e4:1b:8d:a2:75:2c:96: b4:a3:ea:9b:8b:b6:8f:37:03:27:6b:49:f4:e2:8e: b3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A6:5D:21:F6:3E:F1:E5:BD:5D:E9:BC:19:E3:EF:07:D1:38:55:08 X509v3 Authority Key Identifier: keyid:3B:A1:08:23:C2:79:93:2D:75:73:B9:30:62:5C:D2:88:44:33:C7:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:15:1b:da:cd:5a:00:07:59:b1:10:60:16:a0:c4:f4:6c:7c: b3:d7:64:45:3d:86:1a:c3:01:44:f0:aa:82:00:95:0f:c5:94: 8e:c7:ee:8f:e2:39:c3:df:91:35:09:f9:dd:48:40:87:18:95: 34:d5:97:89:d0:da:2c:85:25:7d:a2:a7:1e:81:49:54:77:2e: 59:ba:f5:b6:5c:50:bd:fa:9d:c4:03:c9:6f:84:87:ad:ed:83: a5:92:66:33:06:3e:6d:fd:5d:57:d3:1f:bd:88:a6:b3:80:91: 2c:42:d0:29:02:86:ad:0c:12:29:ef:5f:81:cd:2e:82:d4:e0: 21:d2:67:07:79:e8:92:88:54:37:be:66:ba:d3:37:a9:ef:f0: 1a:1e:cf:15:1b:9e:60:6f:82:e2:d3:4e:d6:2e:6f:00:ed:f5: 61:c9:a1:2c:60:28:e8:ce:47:d3:d1:42:81:dd:69:53:9f:62: 02:f6:15:ed:a7:03:cd:6a:4c:f7:7b:a2:c1:7b:2e:bc:78:70: 8e:7c:5a:17:08:dd:2c:45:89:75:d7:d0:b9:7a:b7:98:e6:64: 95:46:0a:06:11:18:3c:2b:2e:a1:b3:57:26:47:7b:36:f9:79: f5:e7:ca:e8:a8:c8:ce:71:86:5d:f7:f1:be:9b:dc:ad:79:7a: 64:b5:e2:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURxAQywC8OqyiJ913746CDmPk9RIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JBMTA4MjNDMjc5OTMyRDc1NzNCOTMwNjI1Q0QyODg0 NDMzQzc0NDAeFw0yNTA3MjAwMzI2NDNaFw0yNTA3MjMxMjU2NDNaMDMxMTAvBgNV BAMTKENGQTY1RDIxRjYzRUYxRTVCRDVERTlCQzE5RTNFRjA3RDEzODU1MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo6axzuLToqH+URQF0Vlrt0Z2S XEaYqu2uXh/Q3IPv6DIRcQb2K/WNlhOqydPUvA5Cg3WRoAxV9ib2S9GX9P0NtiTM VYXYxOmThT1zpKRtgDBZerB9zhg07F4f37VfKrBrMkuv0UVTZPalDm2y4guui3NR 1BPvXzF82hQ8ee+SdbN4EWDpESUdkS1sG7jsYwdz0Ctfe0YLE6Ezh0fxwfjpnIqB 2h4nulWN1iu+5u8KJkKstSSBLhSmeVfRFMGP1N7GL7MwOe8FUnaVAd/S5qzioFsL 20egt8JIsALtGgv8714jR8416F715BuNonUslrSj6puLto83AydrSfTijrMXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz6ZdIfY+8eW9Xem8GePvB9E4VQgwHwYDVR0j BBgwFoAUO6EII8J5ky11c7kwYlzSiEQzx0QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MmQ0OTE3OS00ZDhiLTRkMmQtYWJmNC00MzIzMWRlYjViMDEvMC8zQkExMDgyM0My Nzk5MzJENzU3M0I5MzA2MjVDRDI4ODQ0MzNDNzQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0JBMTA4MjNDMjc5OTMyRDc1NzNCOTMwNjI1Q0QyODg0NDMz Qzc0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODJkNDkxNzktNGQ4Yi00ZDJkLWFi ZjQtNDMyMzFkZWI1YjAxLzAvM0JBMTA4MjNDMjc5OTMyRDc1NzNCOTMwNjI1Q0Qy ODg0NDMzQzc0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACgVG9rNWgAHWbEQYBagxPRsfLPXZEU9hhrD AUTwqoIAlQ/FlI7H7o/iOcPfkTUJ+d1IQIcYlTTVl4nQ2iyFJX2ipx6BSVR3Llm6 9bZcUL36ncQDyW+Eh63tg6WSZjMGPm39XVfTH72IprOAkSxC0CkChq0MEinvX4HN LoLU4CHSZwd56JKIVDe+ZrrTN6nv8BoezxUbnmBvguLTTtYubwDt9WHJoSxgKOjO R9PRQoHdaVOfYgL2Fe2nA81qTPd7osF7Lrx4cI58WhcI3SxFiXXX0Ll6t5jmZJVG CgYRGDwrLqGzVyZHezb5efXnyuioyM5xhl338b6b3K15emS14ms= -----END CERTIFICATE-----Generated at Mon Jul 21 07:25:57 2025 by rpki-client